$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.mft File: A7133A09AC078B101CB7980FE646810280C0D64F.mft (raw, json) Hash identifier: huvFz4/T5lDyZ768ev/ZMBwPiPGreaZ6kwTN5xUHli0= Subject key identifier: FE:A7:D9:58:D0:40:15:69:D9:1E:84:C5:17:B6:0F:E2:9F:DC:06:77 Authority key identifier: A7:13:3A:09:AC:07:8B:10:1C:B7:98:0F:E6:46:81:02:80:C0:D6:4F Certificate issuer: /CN=A7133A09AC078B101CB7980FE646810280C0D64F Certificate serial: 795A622B76B8CD93FD469E171444B0667FD1455A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A7133A09AC078B101CB7980FE646810280C0D64F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.mft Manifest number: B7 Signing time: Tue 08 Sep 2026 18:09:39 +0000 Manifest this update: Tue 08 Sep 2026 18:04:39 +0000 Manifest next update: Fri 11 Sep 2026 23:47:39 +0000 Files and hashes: 1: 3131382e3234322e302e302f32322d3232203d3e2034383132.roa (hash: 58I4ydCCcF9hQm4ALM8HdXPHeUsscGP0Ad1DVSViNOs=) 2: 3131382e3234322e302e302f31362d3136203d3e2030.roa (hash: mUk74oXYFU6Ae6TtZNwjm0VOpRcUFRFOOIDC/sj+JZU=) 3: 3131382e3234322e32342e302f32322d3232203d3e2034383132.roa (hash: NcYkM98RLbkSlZKIJVkf0b8tgMhZh0eBBgVWrZHmpIE=) 4: 3131382e3234322e33322e302f32322d3232203d3e2034383132.roa (hash: eqKYssRjmbT+n2crq/yxbZNVr33UQZ6vHSKYThAYbGw=) 5: 3131382e3234322e31362e302f32322d3232203d3e2034383132.roa (hash: Wg6c56nIiryoYb5Qqfo2U52K9I6Dt+EF0h4NcPIMpRg=) 6: A7133A09AC078B101CB7980FE646810280C0D64F.crl (hash: Jo3OUrM4zwVx4uxSLz2MwLdmggo6D9S1DkTyJFbstvw=) 7: 3131382e3234322e34302e302f32342d3234203d3e2034383132.roa (hash: YuFq6zn2fxeE5ra6cdH7TfbmzrsmrMPSofOx9YtBqUQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.crl rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A7133A09AC078B101CB7980FE646810280C0D64F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 23:47:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:5a:62:2b:76:b8:cd:93:fd:46:9e:17:14:44:b0:66:7f:d1:45:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7133A09AC078B101CB7980FE646810280C0D64F Validity Not Before: Sep 8 18:04:39 2026 GMT Not After : Sep 11 23:47:39 2026 GMT Subject: CN=FEA7D958D0401569D91E84C517B60FE29FDC0677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:22:cd:19:6d:f4:f6:af:7c:c7:ad:ef:94:29: 56:81:63:e4:bb:2a:bb:d5:bc:ff:39:e6:ef:e8:60: 6b:76:8e:8e:9e:d2:cc:99:b9:ac:66:6b:24:f9:ee: 60:ce:f9:dc:b2:95:ab:be:21:83:65:94:4c:47:25: 40:77:61:8e:d3:a1:04:be:4a:62:79:82:8d:a1:de: 55:e9:23:fe:ae:dd:b1:6c:7c:89:02:d5:b2:2e:1f: 20:16:ec:d1:bd:0d:a0:66:f1:57:85:93:7d:ed:c6: 82:83:69:86:5d:5b:ad:ba:2e:0c:f5:91:e4:57:4d: b7:b1:a6:47:83:d5:d9:58:18:0e:0e:7d:91:b1:d0: 3f:83:1a:e4:6d:9f:1d:8f:57:b2:d0:87:9e:ff:ea: 12:61:1a:18:28:4b:63:ce:c1:4b:3d:b8:78:c1:98: df:db:6a:89:31:9e:35:b4:b9:30:af:a2:d0:bc:4d: 7e:af:ae:22:ce:7c:e3:3f:c9:18:a3:b4:f9:67:d3: b2:03:1c:27:e8:13:5f:90:b6:03:c9:73:f7:8d:b3: 46:f5:4d:80:e3:63:94:b9:12:91:59:79:e3:46:69: d6:d1:d6:03:81:d3:e9:73:21:1f:0c:39:e6:ca:21: ff:5e:50:e5:e6:cc:48:cc:00:73:ce:4e:b0:02:a2: f8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A7:D9:58:D0:40:15:69:D9:1E:84:C5:17:B6:0F:E2:9F:DC:06:77 X509v3 Authority Key Identifier: keyid:A7:13:3A:09:AC:07:8B:10:1C:B7:98:0F:E6:46:81:02:80:C0:D6:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A7133A09AC078B101CB7980FE646810280C0D64F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:f3:d0:86:b0:f2:18:ae:6a:c7:52:88:85:12:26:b6:d1:11: ff:66:38:a9:6a:e4:aa:fa:06:62:04:65:25:3e:ce:4e:cf:15: e4:5b:b1:b0:e2:aa:b7:d9:98:a0:fe:29:94:85:9a:a2:26:9c: 5b:db:9c:ce:37:74:19:b6:92:3a:06:04:93:a4:02:70:7c:5b: 15:94:7b:62:b4:50:a6:0c:be:15:c2:75:53:d6:3d:06:d3:5f: 87:af:98:a3:e2:ee:4c:54:6e:4e:b3:7c:21:80:a4:dd:98:1d: ad:66:ef:2a:03:02:07:11:f6:2e:a0:b2:70:b2:7e:02:a1:8a: e7:82:ee:8d:10:71:5c:dc:25:5b:78:c0:c2:02:ef:c5:91:a5: 62:0f:b3:72:26:68:4d:4e:ca:47:e9:f9:e1:0d:e4:85:1c:42: 02:ba:f9:4f:4f:e3:fa:0c:9c:42:8c:4e:c1:92:6b:a3:cd:84: b5:a5:f0:db:c0:3b:69:b2:a1:8e:12:ff:c3:60:5d:ef:f4:03: cd:9b:ca:f6:bc:05:33:67:15:c3:10:a4:af:30:0e:72:ad:1d: 98:cd:92:83:36:a3:01:09:3a:83:91:ac:0b:0b:99:97:21:96: 3e:02:1f:bd:21:5f:ee:d4:d4:8a:a8:22:bf:20:33:ce:82:62: 45:8e:78:48 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeVpiK3a4zZP9Rp4XFESwZn/RRVowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcxMzNBMDlBQzA3OEIxMDFDQjc5ODBGRTY0NjgxMDI4 MEMwRDY0RjAeFw0yNjA5MDgxODA0MzlaFw0yNjA5MTEyMzQ3MzlaMDMxMTAvBgNV BAMTKEZFQTdEOTU4RDA0MDE1NjlEOTFFODRDNTE3QjYwRkUyOUZEQzA2NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOIs0ZbfT2r3zHre+UKVaBY+S7 KrvVvP855u/oYGt2jo6e0syZuaxmayT57mDO+dyylau+IYNllExHJUB3YY7ToQS+ SmJ5go2h3lXpI/6u3bFsfIkC1bIuHyAW7NG9DaBm8VeFk33txoKDaYZdW626Lgz1 keRXTbexpkeD1dlYGA4OfZGx0D+DGuRtnx2PV7LQh57/6hJhGhgoS2POwUs9uHjB mN/baokxnjW0uTCvotC8TX6vriLOfOM/yRijtPln07IDHCfoE1+QtgPJc/eNs0b1 TYDjY5S5EpFZeeNGadbR1gOB0+lzIR8MOebKIf9eUOXmzEjMAHPOTrACoviFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU/qfZWNBAFWnZHoTFF7YP4p/cBncwHwYDVR0j BBgwFoAUpxM6CawHixAct5gP5kaBAoDA1k8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODk4ODQ4OTQ2NDA4NjUzMC8wL0E3MTMzQTA5QUMwNzhCMTAxQ0I3OTgwRkU2NDY4 MTAyODBDMEQ2NEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTcxMzNBMDlBQzA3OEIxMDFDQjc5ODBGRTY0NjgxMDI4MEMwRDY0Ri5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg5ODg0ODk0NjQwODY1MzAvMC9BNzEzM0EwOUFDMDc4 QjEwMUNCNzk4MEZFNjQ2ODEwMjgwQzBENjRGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzPPQhrDyGK5q x1KIhRImttER/2Y4qWrkqvoGYgRlJT7OTs8V5FuxsOKqt9mYoP4plIWaoiacW9uc zjd0GbaSOgYEk6QCcHxbFZR7YrRQpgy+FcJ1U9Y9BtNfh6+Yo+LuTFRuTrN8IYCk 3ZgdrWbvKgMCBxH2LqCycLJ+AqGK54LujRBxXNwlW3jAwgLvxZGlYg+zciZoTU7K R+n54Q3khRxCArr5T0/j+gycQoxOwZJro82EtaXw28A7abKhjhL/w2Bd7/QDzZvK 9rwFM2cVwxCkrzAOcq0dmM2SgzajAQk6g5GsCwuZlyGWPgIfvSFf7tTUiqgivyAz zoJiRY54SA== -----END CERTIFICATE-----Generated at Thu Sep 10 10:44:12 2026 by rpki-client